United States Patent and Trademark Office 



UNITED STATES DEPARTMENT OF COMMERCE 
United States Patent and Trademark Office 

i VI MI » i P.V1EYIS 



APPLICATION NO. 



FILING DATE 



FIRST NAMED INVENTOR 



Richard A. Steinmetz 



28995 7590 

RALPH E. JOCKE 
walker & jocke LPA 
231 SOUTH BROADWAY 
MEDINA, OH 44256 



ATTORNEY DOCKET NO. CONFIRMATION NO. 



HAMILTON, LALITA M 



PAPER NUMBER 



DELIVERY MODE 



Please find below and/or attached an Office communication concerning this application or proceeding. 

The time period for reply, if any, is set in the attached communication. 



PTOL-90A (Rev. 04/07) 



UNITED STATES PATENT AND TRADEMARK OFFICE 



BEFORE THE BOARD OF PATENT APPEALS 
AND INTERFERENCES 



Ex parte RICHARD A. STEINMETZ, RICHARD P. BRUNT, and 
KENNETH W. ZAHOREC 



11 

12 Appeal 2007-2870 

13 Application 10/648,936 

14 Technology Center 3600 

15 

16 

17 Decided: February 13, 2008 



19 
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21 ANTON W. FETTING, Administrative Patent Judges. 

22 FETTING, Administrative Patent Judge 

23 

24 DECISION ON APPEAL 

25 
26 

27 STATEMENT OF CASE 

28 Richard A. Steinmetz, Richard P. Brunt, and Kenneth W. Zahorec 

29 (Appellants) seek review under 35 U.S.C. § 134 of a Non-Final rejection of 

30 claims 13-24 and 28-34, the only claims pending in the application on 

31 appeal. 
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1 We have jurisdiction over the appeal pursuant to 35 U.S.C. § 6(b) 

2 (2002). 

3 

4 We AFFIRM-IN-PART. 

5 The Appellants invented an automated banking machine configuration 

6 system that provides for the selective and secure activation and 

7 configuration of software components and operational parameters 

8 (Specification 1:5-8). 

9 An understanding of the invention can be derived from a reading of 

10 exemplary claim 13, which is reproduced below [bracketed matter and some 
n paragraphing added]. 

12 13. A method for configuring an automated banking machine 

13 comprising: 

14 a) receiving a certificate 

15 through operation of the banking machine; 

16 b) authenticating at least one digital signature 

17 associated with the certificate 

18 through operation of the banking machine; 

19 c) configuring the banking machine 

20 responsive to 

21 the certificate and 

22 authentication of the at least one digital signature 

23 in step (b). 

24 

25 This appeal arises from the Examiner's Non-Final Rejection, mailed 

26 April 24, 2006. The Appellants filed an Appeal Brief in support of the 

27 appeal on July 20, 2006. An Examiner's Answer to the Appeal Brief was 

2 
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1 mailed on November 3, 2006. A Reply Brief was filed on December 27, 

2 2006. 

3 PRIOR ART 

4 The Examiner relies upon the following prior art: 
Dulude US 6,310,966 Bl Oct. 30, 2001 

5 REJECTION 

6 Claims 13-24 and 28-34 stand rejected under 35 U.S.C. § 102(e) as 

7 anticipated by Dulude. 

8 ISSUES 

9 The issue pertinent to this appeal is whether the Appellants have 

10 sustained their burden of showing that the Examiner erred in rejecting claims 
n 13-24 and 28-34 under 35 U.S.C. § 102(e) as anticipated by Dulude. 

12 The pertinent issue turns on whether Dulude describes configuring 

13 software as claimed. 

14 FACTS PERTINENT TO THE ISSUES 

15 The following enumerated Findings of Fact (FF) are believed to be 

16 supported by a preponderance of the evidence. 

17 Claim Construction 

18 01. The disclosure defines "configure" as encompassing the 

19 processes associated with either or both of configuring so as to 

20 enable carrying out desired functions and installing so as to enable 

3 
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1 instructions to be available for use by a computer device 

2 (Specification 5:9-12). 

3 02. The disclosure contains no lexicographic definition of a 

4 "licensing authority." The disclosure does state that a licensing 

5 authority may be a manufacturer of the automated banking 

6 machine or any other entity charged with managing the license 

7 provisions of automated banking machine software (Specification 

8 6:13-16), but this is within the context of an embodiment, and is 

9 not definitive. 

10 Dulude 

n 03. Dulude is directed toward a biometric certification system 

12 binding the biometric identification of consumers with digital 

13 certificates. The biometric certification system authenticates 

14 electronic transactions involving a user, and includes a biometric 

15 input device which responds to a set of physical characteristics of 

16 the user, and generates corresponding biometric data related to the 

17 physical condition of the user. Biometric data is pre-stored as 

18 biometric certificates of registered users through a biometric input 

19 device. Subsequent transactions have transaction biometric data 

20 generated from the physical characteristics of a current user, 

21 which is then appended to the transaction data. The user is 

22 authenticated by comparison against the pre-stored biometric data 

23 of the physical characteristics of users in the biometric database 

24 (Dulude 3:31-50). 

4 
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1 04. Dulude's biometric registration section processes user 

2 biometrics and associated inputs to generate biometric certificates 

3 which are unique to the user, and which are stored in a biometric 

4 database and/or a smart card memory. Once such biometric 

5 certificates are stored, a user may conduct biometrically- secured 

6 electronic transactions sent from the transaction transmission 

7 section to the transaction reception section of Dulude's FIG. 5, at 

8 which the electronic transaction is authenticated and processed 

9 (Dulude 4:17-25). 

10 05. Dulude generates a certificate using a public key of the user at a 
n certificate generator of a registration authority (Dulude 4:55-61). 

12 06. Dulude's biometric certificates are stored in a memory, such as 

13 a biometric database or a memory of a smart card. Dulude's 

14 registration system may be located at a central registration station 

15 associated with a network, such that the corresponding biometric 

16 certificates of a user may be directly and securely stored in a 

17 central biometric database of a network or an individual memory 

18 of a smart card of the user. Accordingly, a central biometric 

19 database may serve a network of users conducting transactions, 

20 such as electronic commerce (E-commerce), over the Internet and 

21 other networks. Alternatively, a smart card of the user may pre- 

22 store the biometric certificates, such that kiosks and other devices 

23 such as terminals and automatic teller machines (ATMs) may 

24 obtain the secured biometric certificate of the user (Dulude 5:33- 

25 49). 

5 
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1 07. Dulude's transaction data may include electronic funds 

2 transfers through an ATM (Dulude 5:56-59). 

3 08. Dulude authenticates a user by sending a decrypted user public 

4 key of a certifying authority to decrypt the digital. The decryptor 

5 then extracts a hash value which was incorporated into the digital 

6 signature. The digital signature is authenticated by comparing 

7 hash values (Dulude (6:66 - 7:20). 

8 PRINCIPLES OF LAW 

9 Claim Construction 

10 During examination of a patent application, pending claims are 

1 1 given their broadest reasonable construction consistent with the 

12 specification. In re Prater, 415 F.2d 1393, 1404-05 (CCPA 1969); In 

13 re Am. Acad. ofSci. Tech Ctr., 367 F.3d 1359, 1364, (Fed. Cir. 2004). 

14 Limitations appearing in the specification but not recited in the claim are 

15 not read into the claim. E-Pass Techs., Inc. v. 3Com Corp., 343 F.3d 1364, 

16 1369 (Fed. Cir. 2003) (claims must be interpreted "in view of the 

17 specification" without importing limitations from the specification into the 

18 claims unnecessarily) 

19 Although a patent applicant is entitled to be his or her own lexicographer 

20 of patent claim terms, in ex parte prosecution it must be within limits. In re 

21 Corr, 347 F.2d 578, 580 (CCPA 1965). The applicant must do so by placing 

22 such definitions in the Specification with sufficient clarity to provide a 

23 person of ordinary skill in the art with clear and precise notice of the 

24 meaning that is to be construed. See also In re Paulsen, 30 F.3d 1475, 1480 

6 
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1 (Fed. Cir. 1994) (although an inventor is free to define the specific terms 

2 used to describe the invention, this must be done with reasonable clarity, 

3 deliberateness, and precision; where an inventor chooses to give terms 

4 uncommon meanings, the inventor must set out any uncommon definition in 

5 some manner within the patent disclosure so as to give one of ordinary skill 

6 in the art notice of the change). 

7 Anticipation 

8 "A claim is anticipated only if each and every element as set forth in the 

9 claim is found, either expressly or inherently described, in a single prior art 

10 reference." Verdegaal Bros. v. Union Oil Co. of California, 814 F.2d 628, 
n 631 (Fed. Cir. 1987). "When a claim covers several structures or 

12 compositions, either generically or as alternatives, the claim is deemed 

13 anticipated if any of the structures or compositions within the scope of the 

14 claim is known in the prior art." Brown v. 3M, 265 F.3d 1349, 1351 (Fed. 

15 Cir. 2001). "The identical invention must be shown in as complete detail as 

16 is contained in the ... claim." Richardson v. Suzuki Motor Co., 868 F.2d 

17 1226, 1236 (Fed. Cir. 1989). The elements must be arranged as required by 

18 the claim, but this is not an ipsissimis verbis test, i.e., identity of terminology 

19 is not required. In re Bond, 910 F.2d 831, 832 (Fed. Cir. 1990). 

20 ANALYSIS 

21 Claims 13-24 and 28-34 rejected under 35 U.S.C. § 102(e) as anticipated by 

22 Dulude. 

23 The Appellants argue each of claims 13-23, 24 and 28 individually. We 

24 must initially construe the term "configure." The disclosure defines this 
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1 term using alternative definitions, viz. encompassing the processes 

2 associated with either or both of configuring so as to enable carrying out 

3 desired functions and installing so as to enable instructions to be available 

4 for use by a computer device (FF 01). We therefore construe "configure" 

5 according to the broadest of these alternatives, as enabling the carrying out 

6 of desired functions. 

7 Claim 13 

8 The Examiner found that Dulude anticipated claim 13 (Answer 3-4). 

9 The Appellants contend that Dulude fails to show configuring responsive 

10 to a certificate and to signature authentication (Appeal Br. 14-15). The 

n Examiner responded that Dulude describes the authentication (Dulude 4:10- 

12 25) by an ATM (Dulude 5:33-50), and configuring the ATM in response 

13 (Dulude 4: 10-25; 5:33-50). The Appellant then argues that although Dulude 

14 describes signature authentication, it is not inherent that this is performed by 

15 the banking machine (Reply Br. 6:First and second full f's). 

16 We disagree with the Appellants. We find that Dulude describes 

17 authenticating a user by both a certificate and authentication of a digital 

18 signature (FF 08). Dulude authenticates a transaction, by means of 

19 authenticating a digital signature within a certificate, at its reception section 

20 (FF 04). For the embodiment of an ATM, this would be within the ATM 

21 itself, where such data is received. Dulude configures an ATM, in that 

22 Dulude enables the ATM to carry out a function, to process transactions 

23 such as electronic funds transfers, following authentication (FF 07). 
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1 Thus the Appellants have not sustained their burden of showing error in 

2 the rejection. 

3 Claim 14 

4 Claim 14 further requires that the certificate include the digital signature, 

5 which is authenticated responsive to a public key of a licensing authority. 

6 The Examiner found that the data containing a certificate on Dulude's 

7 smart card embodiment is authenticated responsive to a public key of a 

8 registration authority (Answer 8). 

9 The Appellants contend that Dulude decrypts with a user key, and 

10 Dulude does not describe this as a public key of a licensing authority, nor 
n authenticating through operation of an ATM (Appeal Br. 16). 

12 We disagree. Dulude generates a certificate on Dulude's smart card 

13 embodiment responsive to a public key of a registration authority (FF 05). 

14 Dulude's data containing a certificate on Dulude's smart card embodiment is 

15 authenticated responsive to a public key of a certifying authority (FF08). 

16 Although claim 14 requires that the public key be of a licensing authority, 

17 the Specification does not define a licensing authority (FF 02). We therefore 

18 construe a licensing authority according to its broadest reasonable 

19 interpretation. We find that the processes of registration and certification 

20 each imply licensing of that which is registered or certified, and therefore 

21 that Dulude's registration and certifying authorities are examples of 

22 licensing authorities. 

23 Thus the Appellants have not sustained their burden of showing error in 

24 the rejection. 
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1 Claim 15 

2 Claim 15 further requires that the certificate correspond to at least one 

3 software component authorized to be installed on the banking machine, and 

4 installing the software component on the banking machine. 

5 The Examiner found that the certificates on smart cards are software and 

6 the act of inserting the card in a machine installs the card's memory 

7 containing the data on the card (Answer 8). The Appellants contend that 

8 Dulude fails to show installing a software component in response to 

9 authorization (Appeal Br. 16-17). 

10 We agree. Even if we were to construe inserting a card containing 

1 1 memory as an installation, as the Examiner did, such an insertion would not 

12 be in response to the authentication, but only to the insertion of the card. 

13 Further, although the certificate on a smart card might be characterized as 

14 software, it is input data, not a component of the machine's software. 

15 Thus the Appellants have sustained their burden of showing error in the 

16 rejection. 

17 Claim 16 

18 Claim 16 further requires that the certificate include sets of configuration 

19 rules, each set corresponding to an automated banking machine which is 

20 enabled to be configured responsive to at least one set. 

21 The Examiner found that the certificate on a smart card has rules for its 

22 use in kiosks or ATM's (Answer 9). The Appellants contend that Dulude 

23 fails to describe plural rules corresponding to at least one of plural banking 
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1 machines, the machines configured to be responsive to at least one set of 

2 rules (Appeal Br. 18). 

3 We agree. Dulude does not describe any rules being contained within its 

4 certificates. The rules which the Examiner describes are those within the 

5 ATM, not within Delude' s certificate. 

6 Thus the Appellants have sustained their burden of showing error in the 

7 rejection. 

8 Claim 17 

9 Claim 17 further requires determining through operation of the banking 

10 machine responsive to an expiration parameter that configuration of the 

n software on the machine is not authorized and so preventing configuration of 

12 software on the banking machine. 

13 The Examiner found that Dulude describes certificates having validity 

14 periods for authorization (Answer 9). The Appellants contend that 

15 irrespective of such validity periods, Dulude fails to describe their use in 

16 authorizing the configuration of software on the machine (Appeal Br. 9). 

17 We agree. Unlike claim 13 which configures a machine, claim 17 

18 requires determining whether configuration of software on a machine is 

19 authorized. Thus, whereas configuring a machine to operate met the breadth 

20 of claim 13, because changing a machine's state meets the broad 

21 construction of "configure", this would be insufficient to show determining 

22 whether configuration of software is authorized. Changing the configuration 

23 of software requires actually changing the interrelationships of software 
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1 components. The Examiner has not shown where Dulude describes this, and 

2 we have similarly been unable to find any such description within Dulude. 

3 Thus the Appellants have sustained their burden of showing error in the 

4 rejection. 

5 Claims 18-21 

6 Claim 18 further requires that the certificate includes an identification 

7 value unique to the banking machine. 

8 Claim 19 further requires determining through operation of the banking 

9 machine that the identification value corresponds to a hardware embedded 

10 identification value in the banking machine. 

n Claim 20 further requires that the certificate include a terminal 

12 identification value and associating the machine with the terminal 

13 identification value. 

14 Claim 21 further requires determining that the terminal identification 

15 value has changed and preventing the machine from performing at least one 

16 transaction function. 

17 The Examiner found that Dulude describes identifying data (Answer 10). 

18 The Appellants contend that the information pointed to by the Examiner is 

19 not unique to the machine or terminal (Appeal Br. 19-21). 

20 We agree. The identification data pointed to by the Examiner (Dulude 

21 1 :65-2: 15) refers to user, card, or certificate identification, not to a banking 

22 machine or terminal. 



12 



Appeal 2007-2870 
Application 10/648,936 

1 Thus the Appellants have sustained their burden of showing error in the 

2 rejections of claims 18-21. 

3 Claims 22 and 23 

4 Claims 22 and 23 further require receiving the certificate from a 

5 licensing authority or from a server in operative connection with the banking 

6 machine. 

7 The Examiner found that Dulude received the certificate from a smart 

8 card, provided by a licensing authority and using a server (Answer 11). The 

9 Appellants contend that does not describe these features. 

10 We disagree. As we found with claim 14, supra, the certificate on 
n Dulude' s smart card is from a licensing authority. We further find that 

12 Dulude describes a network alternate embodiment (Dulude Fig. 5) which 

13 would provide the certificate from a server. 

14 Thus the Appellants have not sustained their burden of showing error in 

15 the rejection. 

16 Claim 24 

17 Claim 24 is the same subject matter of claim 13 drafted in the form of 

18 computer media bearing instructions for performing the method of claim 13. 

19 The Appellants contend that claim 24 is patentable for the same reasons as 

20 claim 13, supra. We found the Appellant did not meet the burden of 

21 showing error in the rejection of claim 13, supra, and thus the Appellants 

22 have not sustained their burden of showing error in the rejection. 
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1 Claims 28-34 

2 Claim 28 is independent and requires verifying through operation of at 

3 least one processor that the at least one serial number included in the at least 

4 one certificate corresponds to at least one serial number associated with at 

5 least one hardware device of the ATM. 

6 The Examiner found that Dulude described using the serial numbers in 

7 smart cards to determine which devices might access the user certificates 

8 (Answer 13-14). The Appellants contend that Dulude does not describe at 

9 least one serial number included in the at least one certificate corresponds to 

10 at least one serial number associated with at least one hardware device of the 
n ATM (Appeal Br. 25). 

12 We agree. The portion of Dulude cited by the Examiner (Dulude 2:1- 

13 10; 5:40-50) merely describes allowing operation of an ATM following 

14 validation of the certificate on a smart card. We find nothing in Dulude that 

15 describes relying on a serial number associated with at least one hardware 

16 device of an ATM. 

17 Thus the Appellants have sustained their burden of showing error in the 

18 rejection of claim 28, and accordingly, in the claims 29-34 that depend from 

19 claim 28 as well. 

20 CONCLUSIONS OF LAW 

21 The Appellants have sustained their burden of showing that the 

22 Examiner erred in rejecting claims 15-21 and 28-34, but have not sustained 

23 their burden of showing that the Examiner erred in rejecting claims 13, 14, 

24 22, 23 and 24 under 35 U.S.C. § 102(e) as unpatentable over the prior art. 

14 
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1 DECISION 

2 To summarize, our decision is as follows: 

3 • The rejection of claims 13, 14, 22, 23 and 24 under 35 U.S.C. § 102(e) 

4 as anticipated by Dulude is sustained. 

5 • The rejection of claims 15-21 and 28-34 under 35 U.S.C. § 102(e) as 

6 anticipated by Dulude is not sustained. 

7 No time period for taking any subsequent action in connection with this 

8 appeal may be extended under 37 C.F.R. § 1.136(a)(l)(iv). 

9 

10 AFFIRMED-IN-PART 

n 

12 
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